CVE-2019-6981

Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.

• CWE-918

• https://bugzilla.zimbra.com/show_bug.cgi?id=109096Issue Tracking, Third Party Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory
• https://bugzilla.zimbra.com/show_bug.cgi?id=109096Issue Tracking, Third Party Advisory
• https://wiki.zimbra.com/wiki/Zimbra_Security_AdvisoriesVendor Advisory

Published

May 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6975Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x…
• CVE-2019-6976libvips before 8.7.4 generates output images from uninitiali…
• CVE-2019-6977gdImageColorMatch in gd_color_match.c in the GD Graphics Lib…
• CVE-2019-6978The GD Graphics Library (aka LibGD) 2.2.5 has a double free …
• CVE-2019-6979An issue was discovered in the User IP History Logs (aka IP_…
• CVE-2019-6980Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allo…
• CVE-2019-6982An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6983An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6984An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6985An issue was discovered in Foxit 3D Plugin Beta before 9.4.0…
• CVE-2019-6986SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attac…
• CVE-2019-6988An issue was discovered in OpenJPEG 2.3.0. It allows remote …